Is a letter or email with a fake invoice for my domain or website renewal a scam?
Very likely yes. Domain renewal scams send invoices mimicking the look of official notices to trick website owners into paying an unknown registrar.
Last reviewed: 1 August 2026
Explanation
Domain renewal scam letters and emails are sent to registered domain owners whose details are publicly available in WHOIS records. They mimic the format of official registry invoices and warn that your domain will expire if you do not pay urgently. Paying transfers your domain to the scammer's registrar rather than renewing it with your existing provider, and the cost is typically far above market rate. Your domain records are also used to harvest payment details. Always verify domain renewal notices by logging into your actual registrar's account — never pay an invoice that arrives unsolicited without first checking your real renewal date.
These notices succeed because they exploit a real administrative anxiety: losing a domain genuinely does break a business's website and email, so an official-looking expiry warning triggers quick payment, especially inside busy companies where the person handling invoices is not the person who registered the domain. Some variants are technically legal but deceptive — the small print reveals you are authorising a transfer to a different registrar at an inflated price rather than paying a fake invoice. Others are pure theft, harvesting card details with no service behind them at all.
A few habits remove the risk entirely. Keep a record of which registrar actually holds each of your domains and when they expire, enable auto-renewal, and treat any renewal demand that arrives by post or unsolicited email as noise. Consider enabling WHOIS privacy so your contact details are not published for scammers to harvest, and make sure whoever pays invoices in your business knows that domain renewals only ever happen inside your registrar account.
Common red flags
- Renewal notice from a registrar you do not use
- Price significantly higher than your current registrar charges
- Language implies your domain will be lost imminently without payment
- Payment link goes to an unfamiliar domain
What to do now
- Log into your actual registrar to check your domain's real expiry date
- Do not pay any invoice that did not come from your verified registrar account
- Mark the domain for auto-renewal with your genuine registrar
- Report domain scam letters to consumer authorities and your national domain registry
Frequently asked questions
What happens if I accidentally pay a domain renewal scam?
Your domain may be transferred to the scammer's registrar. Contact your real registrar immediately to initiate a transfer back. Act quickly — the transfer window is usually 60 days.
How did they know I own this domain and when it renews?
Domain ownership records and expiry dates are publicly visible in WHOIS databases unless you enable privacy protection. Scammers harvest these records in bulk, which is why the notices often quote accurate details.
How do I stop these letters targeting my business?
Enable WHOIS privacy with your registrar, turn on auto-renewal so expiry anxiety loses its power, and brief anyone who handles your invoices that domain renewals are only ever paid inside your registrar account.